nixos/nebula: loosen ProtectSystem

"strict" may be too strict for some PKCS#11 providers.
2024-07-08 01:04:15 -07:00
parent b81827b992
commit 95f1ebd2aa
1 changed files with 1 additions and 1 deletions
@@ -241,7 +241,7 @@ in
              ProtectKernelModules = true;
              ProtectKernelTunables = true;
              ProtectProc = "invisible";
-              ProtectSystem = "strict";
+              ProtectSystem = true;
              RestrictNamespaces = true;
              RestrictSUIDSGID = true;
              User = networkId;